$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json) Hash identifier: xs7PGoeg3JsYFs8TuUA0kt49yk3kTB/B+vRYJQgjo0w= Subject key identifier: 89:49:B6:BF:00:43:2F:7C:B4:12:D1:43:83:60:6E:86:C7:EB:09:B8 Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B Certificate serial: 24B194255F0D6FB1952F4F9EE10C4CDEF9F3F809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft Manifest number: 03AB Signing time: Thu 26 Mar 2026 12:30:55 +0000 Manifest this update: Thu 26 Mar 2026 12:25:55 +0000 Manifest next update: Sun 29 Mar 2026 19:32:55 +0000 Files and hashes: 1: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: Ix81A+vs07LU/9djLXovY6VWJi5tQ8yNAoXwF0B80Gw=) 2: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: cgQmKFRKJxdktyV9rczfIpoHQDdH6UPgKR9KvlttEAM=) 3: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: z8SiNmSQZoeivn4D0nJbpNuNEHST/FILH3X+hwxtGs8=) 4: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: OaYN9F7Ro7W56q+ls2T1VHXeadTTjgnnYsVEGgZUhRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b1:94:25:5f:0d:6f:b1:95:2f:4f:9e:e1:0c:4c:de:f9:f3:f8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B Validity Not Before: Mar 26 12:25:55 2026 GMT Not After : Mar 29 19:32:55 2026 GMT Subject: CN=8949B6BF00432F7CB412D14383606E86C7EB09B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:f8:a7:69:1b:02:6d:2a:ab:36:29:43:93: b7:d9:44:e1:80:d7:73:c3:49:02:06:aa:7a:0f:f7: d2:5e:98:2f:6e:e6:1c:10:32:ff:1c:8c:e2:87:84: a9:db:e3:31:c2:61:61:10:90:96:1b:b1:da:b7:3e: d9:47:11:a1:47:20:a7:cb:60:a9:8f:c2:61:c0:d6: e6:57:87:76:97:89:43:8e:d0:c3:e9:e4:0a:67:d3: 1d:86:2a:a5:7b:79:82:1c:62:5a:9d:b6:3c:da:db: 12:e9:bf:c3:1c:37:a1:94:40:39:ca:d6:51:44:57: fc:f0:6f:80:d7:c8:92:e6:b9:f3:93:15:f8:67:81: 74:33:ae:ac:0d:e6:0d:a6:36:3f:d5:74:b8:06:07: 28:42:24:4a:82:55:f9:40:d0:5a:36:e4:64:b9:58: 46:22:14:3d:8f:7b:26:2e:40:e5:ea:03:b8:a3:4d: f2:cd:62:46:66:d9:ae:a5:5c:c2:85:1c:47:4a:94: 45:1f:bc:30:01:61:20:fc:8a:cc:02:67:62:fd:dc: f7:ce:6f:73:54:af:18:d4:86:fb:a0:0b:88:14:7e: 59:8f:b3:ca:44:59:58:80:25:6c:f4:68:b0:92:a3: 2d:df:87:e3:c9:d8:94:bb:55:91:a0:69:3a:86:ed: fb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:49:B6:BF:00:43:2F:7C:B4:12:D1:43:83:60:6E:86:C7:EB:09:B8 X509v3 Authority Key Identifier: keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:31:f1:7f:5b:15:11:69:26:9d:d2:a0:1b:f4:5c:cc:02: f8:92:77:64:cc:78:e4:1d:fc:1e:dd:26:ef:84:12:6b:64:fd: 6d:6c:d5:e1:57:7f:66:6d:6f:bb:c0:e9:f0:40:c9:6f:d5:99: 05:83:46:41:0b:38:25:6c:a6:05:ed:44:bc:89:61:4c:3d:d9: f1:b1:64:5d:72:4f:b7:22:df:f6:2f:44:8c:90:73:49:51:50: f6:dc:38:e6:7a:47:85:4e:0d:a9:5c:28:d7:76:48:74:1d:55: 5d:88:23:bf:e4:1c:35:22:e7:52:9a:68:cb:85:5e:0d:95:0f: 30:66:83:53:6d:f7:7a:2f:24:c6:e0:18:5f:b9:74:a0:80:8e: cc:25:46:06:f0:b7:bb:0a:79:2d:98:75:39:5d:dd:ce:2e:06: d0:2f:53:c0:6c:4d:f7:15:a9:fe:c0:a8:f6:cb:e5:d1:46:25: 26:20:26:4f:04:37:c9:02:d6:92:ed:93:43:8e:37:8d:ba:a6: de:e8:54:b3:64:8a:b4:b3:f0:23:5f:d0:e4:12:c3:b6:a3:73: 04:8c:70:ca:b0:0c:8e:bd:e1:72:55:bf:d5:67:b6:45:8c:d5: 03:cc:54:c9:06:09:19:67:4a:aa:4f:ee:2d:aa:b3:f2:e1:27: ac:41:78:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLGUJV8Nb7GVL0+e4QxM3vnz+AkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcx MUI0NDcyQjAeFw0yNjAzMjYxMjI1NTVaFw0yNjAzMjkxOTMyNTVaMDMxMTAvBgNV BAMTKDg5NDlCNkJGMDA0MzJGN0NCNDEyRDE0MzgzNjA2RTg2QzdFQjA5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYgvinaRsCbSqrNilDk7fZROGA 13PDSQIGqnoP99JemC9u5hwQMv8cjOKHhKnb4zHCYWEQkJYbsdq3PtlHEaFHIKfL YKmPwmHA1uZXh3aXiUOO0MPp5Apn0x2GKqV7eYIcYlqdtjza2xLpv8McN6GUQDnK 1lFEV/zwb4DXyJLmufOTFfhngXQzrqwN5g2mNj/VdLgGByhCJEqCVflA0Fo25GS5 WEYiFD2PeyYuQOXqA7ijTfLNYkZm2a6lXMKFHEdKlEUfvDABYSD8iswCZ2L93PfO b3NUrxjUhvugC4gUflmPs8pEWViAJWz0aLCSoy3fh+PJ2JS7VZGgaTqG7ft3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUm2vwBDL3y0EtFDg2BuhsfrCbgwHwYDVR0j BBgwFoAUE2l8SiTc53CJ93jNUG1iBxG0RyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC8xMzY5N0M0QTI0 RENFNzcwODlGNzc4Q0Q1MDZENjIwNzExQjQ0NzJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcxMUI0 NDcyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYy MDcxMUI0NDcyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWqMfF/WxURaSad0qAb9FzMAviSd2TMeOQd /B7dJu+EEmtk/W1s1eFXf2Ztb7vA6fBAyW/VmQWDRkELOCVspgXtRLyJYUw92fGx ZF1yT7ci3/YvRIyQc0lRUPbcOOZ6R4VODalcKNd2SHQdVV2II7/kHDUi51KaaMuF Xg2VDzBmg1Nt93ovJMbgGF+5dKCAjswlRgbwt7sKeS2YdTld3c4uBtAvU8BsTfcV qf7AqPbL5dFGJSYgJk8EN8kC1pLtk0OON426pt7oVLNkirSz8CNf0OQSw7ajcwSM cMqwDI694XJVv9VntkWM1QPMVMkGCRlnSqpP7i2qs/LhJ6xBeEk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:36:45 2026 by rpki-client